ABOUT THE ROLE

We are seeking a Senior Network Infrastructure Engineer to join our Core Network Engineering team. You will be joining an established, collaborative group of four engineers (1 Staff Engineer, 1 Senior Network Engineer, 1 Dedicated Wireless/RF Engineer, and 1 Network Engineer). 

In this role, you will be a pillar for our core routing, switching, WAN/backbone transport, multi-cloud interconnects, and edge security systems. Rather than building automation frameworks from scratch, you will partner closely with our dedicated Senior Network Automation Engineer to identify programmatic bottlenecks, standardize configurations, and integrate our multi-vendor ecosystem into our automation pipelines.

You will be instrumental in consulting directly with internal business lines-spanning hardware engineering, software development, advanced manufacturing, and flight-test operations-to translate unconventional technical constraints into robust, secure, and multi-tenant network designs. Additionally, you will own the delivery of high-capacity carrier transport (wave circuits, dark fiber), provision multi-cloud networking (AWS, Azure, GCP), elevate operational observability, mentor junior engineers, and serve as an escalation point for complex Tier-3 network issues.

WHAT YOU’LL DO

• Design, scale, and maintain resilient campus, datacenter, and field-test networks utilizing both traditional three-tier and EVPN-VXLAN fabric designs across Arista (EOS) and Cisco (Catalyst/Nexus) platforms.
• Architect, scale, and maintain our corporate and datacenter WAN backbone-owning carrier circuit delivery, capacity planning, and turn-up for optical waves, dark fiber, and DIA across colocation and telecom providers.
• Design, provision, and maintain resilient hybrid-cloud transit networks across AWS, Azure, and GCP. Implement and manage dedicated interconnects (AWS Direct Connect, Azure ExpressRoute, Google Cloud Interconnect), Transit Gateways/VNet Hubs, dynamic BGP peering, and cloud-native routing architectures.
• Develop scalable network standards, reference architectures, and implementation patterns.
• Participate in architecture reviews and provide technical direction for complex network initiatives.
• Partner with our Senior Network Automation Engineer to drive Network-as-Code workflows-leveraging your foundational knowledge of Python, Nornir, and Jinja2 to define data models, draft templates, and shape API integrations.
• Partner with our dedicated Wireless/RF Engineer to design, deploy, and maintain robust campus-wide and field Wi-Fi deployments leveraging Aruba and Juniper Mist platforms, focusing on enterprise 802.1X/EAP-TLS authentication and client performance optimization.
• Implement, audit, and manage Layer 3-7 security policies, microsegmentation strategies, and site-to-site IPsec tunnels utilizing Palo Alto Networks NGFWs managed globally via Panorama.
• Elevate our telemetry stack beyond traditional SNMP polling. Implement deep-visibility tooling, flow analysis, and streaming telemetry dashboards (Grafana, Prometheus, Syslog) to proactively detect degradation, reduce MTTR, and improve alerting fidelity.
• Act as a final point of technical escalation for critical, intermittent, or high-blast-radius network anomalies. Lead rigorous post-mortem reviews and participate in a shared, multi-engineer Tier-3 on-call rotation.
• Actively support, coach, and level-up junior systems administrators and network engineers across the broader IT and Infrastructure organizations through runbook authoring, architectural reviews, and pairing sessions.

REQUIRED QUALIFICATIONS

• 8+ years of hands-on experience designing, scaling, and maintaining complex multi-vendor enterprise, backbone, and campus production networks.
• Advanced Routing, Switching & Multi-Tenancy:
• Deep operational mastery of BGP (path selection, community manipulation, convergence optimization) and OSPF.
• Demonstrated production experience deploying and troubleshooting EVPN-VXLAN fabrics.
• Proven experience designing multi-tenant network architectures (VRFs, dynamic segmentation, macro- and micro-segmentation).
• Expert-level packet analysis skills (tcpdump, Wireshark) for diagnosing subtle transit failures, MTU/fragmentation mismatches, and asymmetric routing.
• Experience working directly with carriers and telecom providers to scope, order, cross-connect, turn up, and test high-bandwidth transport circuits (10G/100G Waves, dark fiber, DIAs).
• Proven track record provisioning and troubleshooting cloud-native networking components and dedicated connectivity (AWS Direct Connect, Azure ExpressRoute, GCP Cloud Interconnect, VPC/VNet peering, Transit Gateways).
• Automation Fluency & Collaboration:
• A strong programmatic mindset with the ability to read, review, and write foundational Python.
• Working familiarity with automation ecosystems (Nornir, Jinja2, Netmiko) and REST APIs sufficient to collaborate effectively with dedicated automation software engineers.
• Comfort with Git workflows for managing configuration versions and operational changes.
• Multi-Vendor Hardware Mastery: Expert-level configuration, architecture, and troubleshooting experience across:
• Arista Networks: EOS, CloudVision (CVP), modern spine-and-leaf designs.
• Cisco Systems: Catalyst 9k series (IOS-XE) and Nexus switches (NX-OS).
• Palo Alto Networks: NGFW appliances, Panorama, App-ID, User-ID, and GlobalProtect.
• Enterprise Wireless: (Juniper Mist & Aruba) Mist Cloud, Aruba AirWave/Conductor, ClearPass/RADIUS integration, dynamic packet captures, and high-density 802.1X designs.
• High-Touch Cross-Functional Communication: Exceptional ability to translate non-standard business and physical engineering requirements into pragmatic, resilient network architectures.
• Operational Excellence: Willingness to support a weekly Tier-3 on-call rotation and travel periodically to remote field sites, test facilities, or manufacturing sites when hands-on senior engineering is required.
• Eligible to obtain and maintain an active U.S. Secret security clearance

PREFERRED QUALIFICATIONS

• Senior or Expert-level industry certifications (CCNP/CCIE, JNCIP/JNCIE, PCNSE, or Arista ACE).
• Certifications in public cloud networking (e.g., AWS Certified Advanced Networking - Specialty, Azure Network Engineer Associate).
• Experience operating within regulated or compliance-driven environments (e.g., ITAR, EAR, NIST 800-171, CMMC).
• Experience with Network Source-of-Truth platforms (NetBox, Nautobot).
• Hands-on experience with modern observability platforms (Telegraf, InfluxDB, Prometheus, Grafana, OpenConfig/gNMI).